Granger Genetics carefully protects the confidentiality of personal information provided to it by consumers, employees, healthcare professionals and business partners. Granger Genetics values the confidence of its consumers, employees, healthcare professionals and business partners. Granger Genetics will not release personal information to third parties about employees, potential employees, and their family members, contractors and contingent workers, scientific and medical research subjects, scientific and medical investigators and staff, service providers and business partners, investors and shareholders, medical and healthcare professionals, customers, suppliers, vendors, government officials, industry experts and opinion leaders for purposes other than providing services which have been agreed or to comply with applicable legal requirements. Granger Genetics is committed to upholding best practice in our use, collection and disclosure of personal information.
Granger Genetics complies with the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries and Switzerland. Granger Genetics has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Safe Harbor program, and to view Granger Genetics' certification, please visit http://www.export.gov/safeharbor/
Safe Harbor
The United States Department of Commerce the European Commission and the Swiss Federal Data Protection and Information Commissioner have agreed on a set of data protection principles and frequently asked questions (the “Safe Harbor Principles”) to enable U.S. companies to satisfy the requirement under European Union and Swiss law that adequate protection is given to personal information transferred from the EU or Switzerland to the United States. The EU and Switzerland have also recognized the U.S. Safe Harbor as providing adequate data protection. Granger Genetics is committed to protecting personal privacy and adheres to the seven Safe Harbor principles.
Scope
This Safe Harbor Privacy Policy (the “Policy”) applies to all personal information received by Granger Genetics in the United States of America from the EU and Switzerland, in any form including electronic, paper or verbal.
Definitions
For purposes of this Policy, the following definitions shall apply:
- "Agent" means any third party that collects or uses personal information under the instructions of Granger Genetics or to which Granger Genetics discloses personal information for use on Granger Genetics's behalf. These third parties are most commonly: employee payroll, employee benefits, distribution and billing partners.
- "Granger Genetics" means Granger Genetics, American International Biotechnology LLC, its successors, affiliates, subsidiaries, divisions and groups in the United States of America and Switzerland.
- "Personal information" means any information or set of information that identifies or is used by or on behalf of Granger Genetics to identify an individual in the context of providing Granger Genetics's services. Personal information does not include information that is encoded or anonymized.
- "Sensitive personal information" means personal information that reveals race, ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or that concerns health or sex life. Granger Genetics will treat any information received from a third party as sensitive personal information where that third party treats and identifies the information as sensitive personal information.
Privacy Principles
The privacy principles in this Policy are based on the Safe Harbor Principles.
Notice: Where Granger Genetics collects personal information directly from individuals (such as employees or customers) in the EU or Switzerland, it will inform them about the purposes for which it collects and uses such personal information and the type of Agents to which it discloses such information. Notice will be provided in clear and conspicuous language when individuals are first asked to provide personal information to Granger Genetics, or as soon as practicable thereafter, and in any event before Granger Genetics uses or discloses the information for a purpose other than that for which it was originally collected.
Where Granger Genetics receives personal information from its subsidiaries, affiliates or other entities in the EU or Switzerland, it will use and disclose such information in accordance with the notices provided by such entities and the choices made by the individuals in respect of their personal information.
- Choice: Granger Genetics does not use personal information for purposes other than which it was collected, i.e., the provision of Granger Genetics services. Such information is not disclosed to non-agent third parties.
- Transfers To Agents: Granger Genetics most commonly transfers personal information to agents who are subject to the HIPAA Privacy Rule. As such they must safeguard personal information in a way that is consistent with the HIPAA Privacy Rule and the terms of this Policy. In the event that information is transferred to agents who are not subject to the HIPAA Privacy Rule appropriate assurances will be sought from these agents. These may include: a contract obligating the agent to provide at least the same level of protection as is required by the relevant Safe Harbor Principles, being subject to EU Directive 95/46/EC (the EU Data Protection Directive), Safe Harbor certification by the agent, or being subject to another European Commission adequacy finding (e.g., companies located in Switzerland). Where Granger Genetics has knowledge that an agent is using or disclosing personal information in a manner contrary to this Policy, Granger Genetics will take all reasonable steps to prevent that use or disclosure.
- Security: Granger Genetics will take all reasonable precautions to protect personal information in its possession from loss, misuse and unauthorized access. In addition, Granger Genetics will take all reasonable steps to prevent unauthorized disclosure, alteration and destruction of personal information.
- Data Integrity: Granger Genetics will use personal information only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. Granger Genetics will take all reasonable steps to ensure that personal information is relevant to its intended use and is accurate, complete, and up-to-date and does so in order to provide the very best services.
- Access And Correction: Upon request, Granger Genetics will grant individuals reasonable access to personal information that it holds about them. This consists mainly of information received from third parties. In addition, Granger Genetics will take reasonable steps to permit individuals to correct, amend, or delete information that is inaccurate or incomplete with the relevant third party. Granger Genetics is unable to correct anything other than factual errors in any report Granger Genetics produce for its consumers because it is based on information provided by third parties. However,Granger Genetics will take all reasonable steps to facilitate amendments to information provided by third parties if an individual raises a query.
- Enforcement: Granger Genetics will conduct compliance audits of its relevant privacy practices, for example its information systems and data processing installations, to verify adherence to this Policy. Any employee that Granger Genetics determines is in violation of this policy will be subject to disciplinary action up to and including termination of employment.
- Dispute Resolution: Any questions or concerns regarding the use or disclosure of personal information should be directed to the Granger Genetics Privacy Officer at the address given below. Granger Genetics will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with the principles contained in this Policy. For complaints that cannot be resolved between Granger Genetics and the complainant, Granger Genetics has agreed to use the American Arbitration Association, as an independent dispute resolution mechanism that agrees to hear each complaint in compliance with the Framework(s).
Training
Granger Genetics has provided its employees with appropriate training to ensure that all individuals who process personal information are fully aware of their responsibility with respect to data protection.
Limitation On Application Of Principles
Adherence by Granger Genetics to these Safe Harbor Principles may be limited (a) to the extent required to respond to a legal or ethical obligation; and (b) to the extent expressly permitted by an applicable law, rule or regulation.
Internet Privacy
Granger Genetics sees the internet and the use of other technologies as valuable tools for communicating and interacting with consumers, employees, healthcare professionals, business partners, and others. Granger Genetics recognizes the importance of maintaining the privacy of information collected and/or stored online and has systems in place that protect data collected and/or stored online or via an electronic database. Personal information that is transferred from the EU or Switzerland to the United States of America will be treated in accordance with this policy.
Contact Information
Questions or comments regarding this Policy should be submitted to the Granger Genetics Privacy Officer by mail as follows:
Granger Genetics
Data Privacy and Security Officer
601 Biotech Drive Suite 301
Richmond, VA 23235
Phone number: (804) 521-7392
Fax number: (804) 309-4701
Email: [email protected]
Changes To This Safe Harbor Privacy Policy
This Policy may be amended from time to time, consistent with the requirements of the Safe Harbor Principles. If we make changes to this Policy, we will promptly post a copy of the updated Policy on our website. A notice will be posted on the Granger Genetics web site www.grangergenetics.com whenever this Safe Harbor Privacy Policy is changed in a material way.